GIAC Strategic Planning, Policy, and Leadership (GSTRT) 認定 GSTRT 試験問題:

1. Which of the following is a major indicator of a mature security program?
Response:

A) Integration of continuous monitoring and real-time threat intelligence
B) A focus solely on regulatory compliance
C) High turnover in the security team
D) Lack of investment in security awareness training

2. Which key element should be included in a cybersecurity policy to handle third-party vendors and service providers?
Response:

A) A section outlining the security standards and requirements that third-party vendors must adhere to
B) A waiver for third-party vendors exempting them from security compliance
C) A requirement for third-party vendors to provide their own policies without oversight
D) Detailed instructions on how the third-party should operate internally

3. Which approach is most effective for leaders to build trust with their teams during periods of significant organizational change?
Response:

A) Withholding information until changes are finalized
B) Announcing changes abruptly to avoid long periods of uncertainty
C) Avoiding direct communication and delegating responsibility for updates to middle management
D) Providing transparency, involving the team in decision-making, and maintaining regular communication

4. How does aligning a security program with industry best practices, such as NIST or ISO standards, benefit the organization?
Response:

A) It provides a strong foundation for security controls and ensures the program meets widely accepted standards
B) It limits the organization's ability to implement custom controls
C) It reduces the need for audits
D) It increases the cost of the program

5. How often should cybersecurity policies be reviewed and updated to remain effective?
Response:

A) Every five years
B) Never, once policies are implemented
C) Only when a major security incident occurs
D) Regularly, at least annually, or when there are significant changes to the threat landscape

質問と回答：